Multiple choice technology security

Cross-site request forgery

  1. is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users.

  2. is an attempt to make a computer resource unavailable to its intended users by sending invalid/forged requests

  3. is a form of attack on a database-driven Web site in which the attacker executes unauthorized SQL commands by taking advantage of insecure code on a system connected to the Internet

  4. is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

CSRF is an attack that tricks a user's browser into making unwanted requests to a website where the user is already authenticated. The website trusts the request because it comes from a legitimate user's session, even though the user didn't intend to make that request. Unlike XSS which injects scripts, CSRF exploits the trust relationship between user and site.

Keep practicing — related questions